wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(security): 新增 monitoring alerting 只讀清冊
All checks were successful
CD Pipeline / tests (push) Successful in 1m26s
Details
Code Review / ai-code-review (push) Successful in 23s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m52s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m59s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-12 00:45:08 +08:00
parent 7a7daa333e
commit 8a424f0c56
15 changed files with 4086 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
apps/web/src/app/[locale]/iwooos/page.tsx
View File

@@ -2071,7 +2071,7 @@ const highValueConfigOwnerPacketSummary = [
const highValueConfigControlCoverageSummary = [
{ key: 'categories', value: '14', icon: ListChecks, tone: 'steady' },
{ key: 'c0', value: '8', icon: AlertTriangle, tone: 'warn' },
{ key: 'coverage', value: '65%', icon: ShieldCheck, tone: 'warn' },
{ key: 'coverage', value: '66%', icon: ShieldCheck, tone: 'warn' },
{ key: 'runtimeGate', value: '0', icon: Lock, tone: 'locked' },
] as const
@@ -2079,7 +2079,7 @@ const highValueConfigControlCoverageItems: HighValueConfigControlCoverageItem[]
{ key: 'dockerSystemd', rank: 'P1-1', value: '50%', icon: Server, tone: 'warn' },
{ key: 'sshNetwork', rank: 'P1-2', value: '54%', icon: Network, tone: 'warn' },
{ key: 'backupRestore', rank: 'P1-3', value: '58%', icon: Database, tone: 'warn' },
{ key: 'monitoring', rank: 'P1-4', value: '56%', icon: Radar, tone: 'warn' },
{ key: 'monitoring', rank: 'P1-4', value: '62%', icon: Radar, tone: 'warn' },
]
const highValueConfigControlCoverageBoundaries = [
@@ -2088,7 +2088,7 @@ const highValueConfigControlCoverageBoundaries = [
'high_value_config_control_coverage_category_count=14',
'high_value_config_control_coverage_c0_category_count=8',
'high_value_config_control_coverage_c1_category_count=4',
'high_value_config_control_coverage_average_percent=65',
'high_value_config_control_coverage_average_percent=66',
'high_value_config_control_coverage_needs_live_evidence_count=6',
'high_value_config_control_coverage_owner_response_required_count=14',
'high_value_config_control_coverage_owner_response_received_count=0',
@@ -2108,6 +2108,14 @@ const highValueConfigControlCoverageBoundaries = [
'backup_restore_escrow_inventory_offsite_sync_accepted_count=0',
'backup_restore_escrow_inventory_credential_escrow_accepted_count=0',
'backup_restore_escrow_inventory_retention_change_accepted_count=0',
'monitoring_alerting_observability_inventory_surface_count=60',
'monitoring_alerting_observability_inventory_alert_rule_surface_count=13',
'monitoring_alerting_observability_inventory_deploy_or_reload_surface_count=6',
'monitoring_alerting_observability_inventory_write_capable_surface_count=11',
'monitoring_alerting_observability_inventory_runtime_gate_count=0',
'monitoring_alerting_observability_inventory_reload_owner_accepted_count=0',
'monitoring_alerting_observability_inventory_receiver_owner_accepted_count=0',
'monitoring_alerting_observability_inventory_route_smoke_accepted_count=0',
'docker_compose_action_authorized=false',
'systemctl_action_authorized=false',
'repair_bot_execution_authorized=false',
@@ -2136,6 +2144,22 @@ const highValueConfigControlCoverageBoundaries = [
'restic_prune_authorized=false',
'rclone_config_authorized=false',
'velero_restore_authorized=false',
'prometheus_reload_authorized=false',
'alertmanager_reload_authorized=false',
'grafana_dashboard_apply_authorized=false',
'signoz_rule_apply_authorized=false',
'sentry_deploy_authorized=false',
'langfuse_config_change_authorized=false',
'otel_collector_reload_authorized=false',
'receiver_route_change_authorized=false',
'silence_policy_change_authorized=false',
'telegram_send_authorized=false',
'notification_route_change_authorized=false',
'webhook_receiver_change_authorized=false',
'remote_write_change_authorized=false',
'exporter_deploy_authorized=false',
'live_alert_fire_authorized=false',
'alert_chain_smoke_authorized=false',
'workflow_modification_authorized=false',
'active_scan_authorized=false',
'agent_bounty_runtime_authorized=false',